Recursive Governance: When Agents Write the Rules They Execute

Описание и применение

Система динамического управления правилами, где агенты могут предлагать, изменять и утверждать правила, предотвратила случайное удаление 40 модулей, обеспечив проверку согласованности и жизненный цикл правил.

Задача

A static sync filter file caused accidental deletion of ~40 private modules because it missed a pattern after a directory restructure.

Результат

The dynamic governance system prevented the accidental deletion of private modules by enforcing consistency checks on sync filter rules. It also introduced mechanisms for rule lifecycle management, reducing rule rot and ensuring clarity of active rules.

Рабочий процесс

• 1. Agent proposes a rule via propose_rule with rationale, owning agent, and affected namespaces.
• 2. Agent amends existing rules via amend_rule; deltas are diffed, never overwritten.
• 3. Agents ratify proposals with ratify_rule, requiring per-shard quorum and no outstanding vetoes.
• 4. Veto_rule allows a human to exit a rule, with justification logged.
• 5. check_consistency scans rule graph, computes embedding similarity, and applies an allow/deny list to reject proposals that would let an agent touch disallowed namespaces.
• 6. Two-phase commit: observation window (24h or N messages) for rebuttals, then ratification.
• 7. Governance rules stored in append-only namespace governance://rules/, with parent references for replay.
• 8. Periodic cleanup to retire obsolete rules and archive them.

Доказательства

We almost lost forty modules to a file that never changed.

Источник

The filter file was missing one pattern. That's it. One pattern.

Источник

The script didn't warn, didn't ask, didn't fail. It just mirrored the state it was told to mirror.

Источник

We gave the agents the ability to write their own rules.

Источник

check_consistency scans the existing rule graph, computes an embedding similarity between the new rule surface and the rule surfaces already in effect, then applies a short, human-maintained allow/deny list on tool names.

Источник

If the sync job had this system, the filter file would have been a rule in governance://rules/sync-filters/.

Источник